Networkworld

Ingress-Nginx Vulnerability Enables Code Execution in Kubernetes

First seen 5 Feb 2026, 11:54 UTC • Cyberpress

+1 •80% similarity •25.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A vulnerability in the ingress-nginx controller allows authenticated attackers to execute arbitrary code and access Kubernetes Secrets. This high-severity issue affects users of the Kubernetes platform utilizing the ingress-nginx controller. Security teams are advised to assess their deployments and apply necessary mitigations.

ThreatCluster AI How this analysis works

Attack Flow

14 entities, 38 inferred relationships (STIX 2.1).

Technique (2)

Data Breach
DDoS

Vulnerability (6)

CVE-2026-1580
CVE-2026-24512
CVE-2026-24513
CVE-2026-24514
Ingress-NGINX Vulnerability
IngressNightmare

Affected Platform (5)

Cilium Ingress
HAProxy Ingress
Kubernetes
Kubernetes Gateway API
Traefik

Tool (1)

Nginx

Relationships

Nginx exploits CVE-2026-1580
Nginx exploits CVE-2026-24512
Nginx exploits CVE-2026-24513
Nginx exploits CVE-2026-24514
Nginx exploits Ingress-NGINX Vulnerability
CVE-2026-1580 targets Cilium Ingress
CVE-2026-1580 targets HAProxy Ingress
CVE-2026-1580 targets Kubernetes
CVE-2026-1580 targets Kubernetes Gateway API
CVE-2026-24512 targets Cilium Ingress
CVE-2026-24512 targets HAProxy Ingress
CVE-2026-24512 targets Kubernetes
CVE-2026-24512 targets Kubernetes Gateway API
CVE-2026-24513 targets Cilium Ingress
CVE-2026-24513 targets HAProxy Ingress
CVE-2026-24513 targets Kubernetes
CVE-2026-24513 targets Kubernetes Gateway API
CVE-2026-24514 targets Cilium Ingress
CVE-2026-24514 targets HAProxy Ingress
CVE-2026-24514 targets Kubernetes
CVE-2026-24514 targets Kubernetes Gateway API
Ingress-NGINX Vulnerability targets Cilium Ingress
Ingress-NGINX Vulnerability targets HAProxy Ingress
Ingress-NGINX Vulnerability targets Kubernetes
Ingress-NGINX Vulnerability targets Kubernetes Gateway API
IngressNightmare targets Cilium Ingress
IngressNightmare targets HAProxy Ingress
IngressNightmare targets Kubernetes
IngressNightmare targets Kubernetes Gateway API
Data Breach targets Cilium Ingress
Data Breach targets HAProxy Ingress
Data Breach targets Kubernetes
Data Breach targets Kubernetes Gateway API
DDoS targets Cilium Ingress
DDoS targets HAProxy Ingress
DDoS targets Kubernetes
DDoS targets Kubernetes Gateway API
CVE-2026-1580 related to Traefik

Community

Browse all →

Tracked Entities in This Story

Cilium Ingress HAProxy Ingress Kubernetes Kubernetes Gateway API Traefik

Ingress-Nginx Vulnerability Enables Code Execution in Kubernetes

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story